Summer Certification Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: force70

Pass the Cisco CCNP Security 300-715 Questions and answers with CertsForce

Viewing page 4 out of 10 pages
Viewing questions 31-40 out of questions
Questions # 31:

Which two authentication protocols are supported by RADIUS but not by TACACS+? (Choose two.)

Options:

A.

MSCHAPv1


B.

PAP


C.

EAP


D.

CHAP


E.

MSCHAPV2


Expert Solution
Questions # 32:

Which nodes are supported in a distributed Cisco ISE deployment?

Options:

A.

Policy Service nodes for session failover


B.

Monitoring nodes for PxGrid services


C.

Administration nodes for session failover


D.

Policy Service nodes for automatic failover


Expert Solution
Questions # 33:

An engineer is performing a bulk import of printer endpoints into a Cisco ISE local database by using LDAP. Which LDAP field must be configured to ensure that the devices are not profiled as Unknown?

Options:

A.

MAC Address Object Class


B.

MAC Address Profile Class


C.

Profile Attribute Name


D.

Device Profile Name


Expert Solution
Questions # 34:

A user misplaces a personal phone and wants to blacklist the device from accessing the company network. The company uses Cisco ISE for corporate and BYOD device authentication. Which action must the user take in Cisco ISE?

Options:

A.

Sign in to the BYOD portal and mark the device as Lost.


B.

Sign in to the My Devices portal and mark the device as Lost.


C.

Sign in to the My Devices portal and mark the device as Irrecoverable.


D.

Sign in to the BYOD portal and mark the device as Irrecoverable.


Expert Solution
Questions # 35:

An administrator is configuring a Cisco WLC for web authentication Which two client profiling methods are enabled by default if the Apply Cisco ISE Default Settings check box has been selected ' ? (Choose two.)

Options:

A.

CDP


B.

DHCP


C.

HTTP


D.

SNMP


E.

LLDP


Expert Solution
Questions # 36:

Which CLI command must be configured on the switchport to immediately run the MAB process if a non-802.1X capable endpoint connects to the port?

Options:

A.

authentication order mab dot1x


B.

authentication fallback


C.

dot1x pae authenticator


D.

access-session port-control auto


Expert Solution
Questions # 37:

An engineer is deploying a new guest WLAN for a company. The company wants this WLAN to use a sponsored guest portal for secure guest access. The wireless LAN controller must direct the guests to a web page on Cisco ISE for authentication. Which type of authentication must be configured for the guest portal in Cisco ISE?

Options:

A.

EWA


B.

DWA


C.

CWA


D.

web portal


Expert Solution
Questions # 38:

An administrator adds a new network device to the Cisco ISE configuration to authenticate endpoints to the network. The RADIUS test fails after the administrator configures all of the settings in Cisco ISE and adds the proper configurations to the switch. What is the issue " ?

Options:

A.

The endpoint profile is showing as " unknown. "


B.

The endpoint does not have the appropriate credentials for network access.


C.

The shared secret is incorrect on the switch or on Cisco ISE.


D.

The certificate on the switch is self-signed not a CA-provided certificate.


Expert Solution
Questions # 39:

An engineer must use Cisco ISE profiler services to provide network access to Cisco IP phones that cannot support 802.1X. Cisco ISE is configured to use the access switch device sensor information — system-description and platform-type — to profile Cisco IP phones and allow access.

Which two protocols must be configured on the switch to complete the configuration? (Choose two.)

Options:

A.

LLDP


B.

CDP


C.

EAPOL


D.

SNMP


E.

STP


Expert Solution
Questions # 40:

An engineer is configuring Central Web Authentication in Cisco ISE to provide guest access. When an authentication rule is configured in the Default Policy Set for the Wired_MAB or Wireless_MAB conditions, what must be selected for the " if user not found " setting?

Options:

A.

CONTINUE


B.

REJECT


C.

ACCEPT


D.

DROP


Expert Solution
Viewing page 4 out of 10 pages
Viewing questions 31-40 out of questions